Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnly=false, idempotent=true, destructive=true; the description adds cost and authorization behavior (administrator-configured model, per-image price, default 2 credits), spending-policy vs approval semantics, and the fact that 'running' means background analysis where the agent should wait and follow nextAction to retrieve a free receipt without restarting. That is substantial behavior beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.